This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NcKOGS-PZKeHpuiQdCqZoLWagoc.roa File: NcKOGS-PZKeHpuiQdCqZoLWagoc.roa (raw, json) Hash identifier: sUWv5/yu3Zpq+tLp5qBvzVuxQG+303V9AOdyGXjF2Mg= Subject key identifier: 35:C2:8E:19:2F:8F:64:A7:87:A6:E8:90:74:2A:99:A0:B5:9A:82:87 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84E663821D9286B90DE809C5C1B002 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NcKOGS-PZKeHpuiQdCqZoLWagoc.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401818 IP address blocks: 31.56.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e6:63:82:1d:92:86:b9:0d:e8:09:c5:c1:b0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35c28e192f8f64a787a6e890742a99a0b59a8287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:ca:54:eb:b3:67:1d:f7:10:3e:6c:33:f7: ae:f3:c7:fd:e5:1a:4b:96:b9:f0:dc:60:e7:dc:0a: bf:11:42:25:14:c4:03:c1:37:e2:7a:28:b4:ec:f1: ba:71:69:ee:17:46:70:26:78:cd:5c:78:a6:be:ca: 3f:d3:6c:b2:3b:68:f0:ed:1b:cd:e2:76:5a:19:68: 2e:84:e0:7e:8a:c4:b3:ad:ba:65:cd:1f:d7:0e:c6: 2b:2c:51:88:53:25:a1:17:b8:ac:be:6a:14:e8:d3: 41:6c:76:97:66:80:24:98:60:50:31:4f:54:cc:a1: 5f:40:7e:62:85:bf:e3:00:38:94:d7:09:0e:56:9f: d2:3a:86:a8:ed:4a:75:9e:1d:aa:3f:d6:ea:ef:29: 0e:35:7b:b0:8c:10:a7:bd:ea:9b:fb:43:e6:e4:48: 9b:e0:af:e6:25:e7:87:4b:44:93:b6:c6:89:ef:eb: 7d:40:a2:47:58:07:37:30:21:2c:3d:08:46:93:5b: 89:59:a2:0f:df:b4:d0:3e:13:b9:05:66:b0:32:1a: cb:40:70:d6:18:c8:22:09:83:29:00:31:63:54:c7: 05:b0:9a:39:24:fa:8f:ac:2d:cf:42:d7:f0:3d:28: 9d:f2:96:42:10:07:90:d3:cd:49:27:fe:91:86:a6: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C2:8E:19:2F:8F:64:A7:87:A6:E8:90:74:2A:99:A0:B5:9A:82:87 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NcKOGS-PZKeHpuiQdCqZoLWagoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.87.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:cb:20:cb:23:57:ca:39:b2:92:c6:51:ce:2c:d5:c3:7c:12: 1b:13:57:e1:30:91:b0:27:32:f3:b0:7d:de:b3:6b:c2:cc:bb: af:c9:c4:c5:28:98:2f:cc:58:6a:0b:67:21:0d:68:83:84:f5: fc:14:0e:a0:c4:8a:58:db:c3:36:72:60:52:87:fc:55:f1:b5: 9d:2b:e0:34:08:0c:05:da:0d:0c:25:35:3c:99:72:4d:0b:34: e5:6b:56:c4:b3:93:7a:c3:b6:a7:81:ce:c2:79:1d:8f:23:81: 04:ad:67:a3:10:f4:fa:cf:a7:71:49:d2:b7:20:27:83:bb:8b: fc:35:9b:a4:29:c1:83:ed:46:fa:ef:a7:b6:68:0b:81:1d:33: a7:87:1e:fc:7f:87:34:bf:57:66:7c:9e:a7:2c:68:e3:ff:bb: ba:0b:e3:f3:62:59:e3:9b:62:3e:f6:8f:67:f5:cf:51:18:b1: a0:1d:09:8e:c6:9e:4b:a7:e4:01:fc:81:ee:af:ea:2d:91:ab: 17:ca:43:d7:b1:ed:32:fb:be:1b:ad:3d:63:92:9d:75:10:ea: 06:77:55:39:e4:d1:9d:0f:eb:35:21:6d:69:f0:ef:2c:45:6f: f0:5e:19:b9:cb:5f:3b:c4:6f:f2:58:0f:67:f5:2b:c7:62:21: 1e:20:7c:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOZjgh2ShrkN6AnFwbACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWMyOGUxOTJmOGY2NGE3ODdhNmU4OTA3NDJhOTlhMGI1OWE4Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHbKVOuzZx33ED5sM/eu88f95RpL lrnw3GDn3Aq/EUIlFMQDwTfieii07PG6cWnuF0ZwJnjNXHimvso/02yyO2jw7RvN 4nZaGWguhOB+isSzrbplzR/XDsYrLFGIUyWhF7isvmoU6NNBbHaXZoAkmGBQMU9U zKFfQH5ihb/jADiU1wkOVp/SOoao7Up1nh2qP9bq7ykONXuwjBCnveqb+0Pm5Eib 4K/mJeeHS0STtsaJ7+t9QKJHWAc3MCEsPQhGk1uJWaIP37TQPhO5BWawMhrLQHDW GMgiCYMpADFjVMcFsJo5JPqPrC3PQtfwPSid8pZCEAeQ081JJ/6RhqYl2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXCjhkvj2Snh6bokHQqmaC1moKHMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvTmNLT0dTLVBaS2VIcHVpUWRDcVpvTFdhZ29jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhXMA0G CSqGSIb3DQEBCwUAA4IBAQAvyyDLI1fKObKSxlHOLNXDfBIbE1fhMJGwJzLzsH3e s2vCzLuvycTFKJgvzFhqC2chDWiDhPX8FA6gxIpY28M2cmBSh/xV8bWdK+A0CAwF 2g0MJTU8mXJNCzTla1bEs5N6w7angc7CeR2PI4EErWejEPT6z6dxSdK3ICeDu4v8 NZukKcGD7Ub676e2aAuBHTOnhx78f4c0v1dmfJ6nLGjj/7u6C+PzYlnjm2I+9o9n 9c9RGLGgHQmOxp5Lp+QB/IHur+otkasXykPXse0y+74brT1jkp11EOoGd1U55NGd D+s1IW1p8O8sRW/wXhm5y187xG/yWA9n9SvHYiEeIHz9 -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:38 2026 by rpki-client